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DETAILED ACTION 
Response to Arguments 

1 . Applicant's arguments filed 1 1/21/2007 have been f unconsidered but they are 
not persuasive. 

In response to applicant's arguments: 

Applicant argues that the Simmons' reference does not cover the limitations of 
the amended claims 1,9, 17 and 22-24, which are the limitations previously presented 
on claims 3, 1 1 and 18. To this matter, the examiner respectfully disagrees. 

As per the Office Action on 08/21/2007, the limitations of claims of claims 3, 1 1 
and 18 were rejected under the combination of Simmons in view of NPL document titled 
'Introduction to SSL' (hereinafter 'SSL' reference). The response of the applicant 
addresses the no presence of those limitations in Simmons reference, which was the 
reason why the secondary reference ('SSL' reference) was brought in the Office Action. 
However, in the response, there were no arguments on how applicant's invention as 
stated in claims 3, 1 1 and 18 differs from the combined teachings of Simmons and the 
'SSL' reference. Therefore, the examiner respectfully believes that the art of record still 
covers all the limitations of applicant's invention as claimed. 

Claim Rejections - 35 (JSC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1, 2, 9, 10, 17, and 22-33 are rejected under 35 U.S.C. 103(a) as being 

unpatentable over Simmons et al. (hereinafter 'Simmons', Corrected Pub. No. 

2006/0085821, of record) in view of NPL document "Introduction to SSL" (hereinafter 

'SSL' reference, of record). 

Regarding claims 1, 9, 17 and 22-33, Simmons teaches a Video-on-Demand system 
(with respective method and computer readable medium) for demanding a video 
program via a short message, comprising: 

short message generating means for receiving a user demand (User interface 
54, Fig. 2; [0040] lines 1-8), and generating a demand short message based on the 
user demand, said demand short message including at least a User Identifier field, a 
Program Identifier field of the demanded video program and an Authentication field 
([0017]; [0040] lines 1-15; [0044] lines 22-[0045]; [0052]); 

short message sending means for sending the demand short message 
generated by the short message generating means (Network connectivity 12, Fig. 2; ; 

demand short message processing means (Transaction server 10, Fig. 1) at a 
program delivering end for receiving the demand short message, processing the 
received demand short message to extract the user identifier and using the 
Authentication field to authenticate the legality of the user, and sending the program 
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identifier of the demanded program by a legal user to video delivering means ([0040]; 
[0044]; [0045]); 

video delivering means (Content Providers 6, Fig. 1) for sending program 
content corresponding to the program identifier from the program delivering end to the 
user end indicated by a legal user identifier ([0040]- [0045]); and 

program playing means at the user end for receiving the video program sent by 
the video delivering means and playing it back to the user (42, Fig. 2). 

On the other hand, although Simmons teaches that secure socket layer (SSL) 
can be implemented; he does not teach the details of the implementation of the security 
implementation and the encryption of the content. 

However, in an analogous art, the article "Introduction to SSL" teaches that when 
communication between server and user is to be established, authentication certificates 
along with other information to first authenticate each other and share keys and once 
authentication is performed encryption and decryption of the content is performed with 
the shared keys (page 1 and 2, paragraphs 7 and 8; paragraph 21 numerals 1-10). 
Additionally, the 'SSL' teaches that a format or ciphers to be used are established 
between client and server for communicating between them (page 6, numerals 1-3). 
The article teaches that for giving more security while transmitting, all data transmitted 
is encrypted using different level of ciphers such as MD5, which creates a digest of the 
message (all fields transmitted) (pages 2 and 3, paragraphs 11 and 12; or table 1 listing 
all the ciphers that support key exchange). 



Application/Control Number: Page 5 

10/667,834 

Art Unit: 2623 

Therefore, it would have been obvious to an ordinary skilled in the art at the time 
of the invention to modify Simmons's system to include SSL as a security measure as 
taught by NPL document, for authenticated and encrypted communication between 
clients and servers ("Introduction to SSL", paragraph 1). 

Regarding claims 2 and 10, the combined teachings of Simmons and the 'SSL' 
reference teach a Video-on-Demand further comprising the step of sending from the 
program delivering end to the user end a reply message including a confirmation 
message indicating that the demand short message has been received (Simmons: The 
user knows that his request was received when he/she receives the files, [0044] 
lines 32-37; or when the PIN is sent, which can be sent with the request [0052], a 
message is sent if it is not verified, [0049]). 

4. Claims 4- 8, 12-16 and 19-21 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Simmons et al. (hereinafter 'Simmons', Corrected Pub. No. 
2006/0085821, of record) in view of NPL document "Introduction to SSL" (hereinafter 
'SSL' reference, of record) in further view of Needham et al. (hereinafter 'Needham', 
Pub. No. 2003/0177495, of record). 

Regarding claims 4, 12 and 19, the combined teachings of Simmons and the 
'SSL' reference teach all the limitations of the claims they depend on. Simmons and the 
'SSL' reference also teach a video-on-demand system further comprising: 
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an optional field containing optional data that may describe said demand more 
precisely (Simmons: Title and/or code can be transmitted, [0050] and [0052]), 

a Format Identifier field for defining a format of said demand short message, a 
Demand Time field for indicating a time for sending said demand ('SSL': page 6 
numerals 1-3); 

where said Authentication field is an encrypted digest of the above User Identifier 
field, Program Identifier field, Format Identifier field, Demand Time field, Playback Time 
field, and Optional field ('SSL': where the article teaches that for giving more 
security while transmitting, all data transmitted is encrypted using different level 
of ciphers such as MD5, which creates a digest of the message (all fields 
transmitted) (pages 2 and 3, paragraphs 11 and 12; or table 1 listing all the 
ciphers that support key exchange). 

On the other hand, the combined teachings of Simmons and the 'SSL' reference 
do not explicitly teach a Playback Time field for indicating a start time of video playing. 

However, in an analogous art, Needham teaches a video-on-demand system in 
which the user is able to select the time of download and further playback ([0020]). 

Therefore, it would have been obvious to an ordinary skilled in the art at the time 
of the invention to have modified Simmons and "SSL' invention with Needham's 
selection of the time of download and playback for the benefit of finding a time of the 
day where more bandwidth and processing power is available (Needham, [0020]). 
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Regarding claims 5, 13 and 20, the combined teachings of Simmons, the 'SSL' 
reference and Needham teach a Video-on-Demand system (with respective method and 
computer readable medium) wherein said Authentication field is generated according to 
the following procedure: 

Calculating the digest of all the fields except the Authentication field using a 
digest algorithm ("Introduction to SSL": The MD5 algorithm calculates a digest of 
the message (page 2 paragraph 11) excepting the Authentication field which is an 
encrypted result of said digest, as per claim 4); 

encrypting with a cipher algorithm a calculated digest by adopting a secret 
authentication key corresponding to a user end device, uniquely allocated in 
advance by the program delivering end ("Introduction to SSL": Table 1 lists all the 
ciphers or algorithms that support key exchange. The process of exchanging the 
keys between server and client is explained in page 6 numerals 1-10. In other 
words, before sending or transmitting anything a set of keys and ciphers are 
established and all messages are encrypted with them, as for example the digest 
of the message); and 

a process of authenticating a user's legality by the program delivering end being 
conducted according to the following procedures: 

calculating the digest of all the fields except the Authentication field using 

a digest algorithm; encrypting with a cipher algorithm the calculated digest by 

adopting a secret authentication key corresponding to a user end device, 

uniquely allocated in advance by the program delivering end, so as to calculate 
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an Authentication field; and checking whether the calculated Authentication field 
and the received (It is well known that the MD5 algorithm provides a way for 
verifying transmitted data and for "compressing" data before being 
encrypted with a private key -as a matter of example, see attached "MD5- 
Digest Algorithm" document. Therefore, after decrypting the message 
using the keys exchanged between client and server as described above, it 
is inherent that the server has to calculate a digest of the transmitted data 
in order to compare it with the received digest received from the client). 

Regarding claims 6 and 14, the combined teachings of Simmons, the 'SSL' 
reference and Needham teach a Video-on-Demand system (with respective method and 
computer readable medium), wherein when said video program is sent via a conditional 
access system, a content key is delivered with the video program, so there is no need 
for a separate deliver of said reply message (Simmons: [0040], [0045] and [0048]). 

Regarding claims 7, 8, 15 and 16, the combined teachings of Simmons, the 'SSL' 
reference and Needham teach a Video-on-Demand system (with respective method and 
computer readable medium) wherein when the video program 
demanded by the user needs to be encrypted and the encrypt key is not sent via a 
conditional access system, the method further comprising the steps of: 

generating, at the program delivering end, an encrypted reply message 
containing a content key of said video program, and sending it to the user end 
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decrypting, at the user end, the content key from said encrypted reply message; and 
(When establishing communication with the server, and after sending the client 
information for authentication, a key from the server is sent to the server to 
decrypt all the information sent from the server: "Introduction to SSL", page 6 
numerals 6-10); 

decrypting the video program received from the program delivering end 
according to the decrypted content key (Simmons, [0040], [0045] and [0052]). 

Regarding claim 21, the combined teachings of Simmons, the 'SSL' reference 
and Needham teach a Video-on-Demand system (with respective method and computer 
readable medium) a short message generating means according to claim 20, wherein 
said digest algorithm is MD5 algorithm, and said cipher algorithm is 3DES algorithm 
("Introduction to SSL", pages 2 and 3, paragraphs 11 and 12; or table 1 listing all 
the ciphers that use support key exchange). 

Conclusion 

5. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
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extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Omar Parra whose telephone number is 571-270-1449. 
The examiner can normally be reached on Under Academy Schedule. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Christopher Grant can be reached on 571-272-7294. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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